PT-2023-1233 · Microsoft · Dwm Core Library +1

Name of the Vulnerable Software and Affected Versions: Microsoft DWM Core Library affected versions not specified Description: The issue is related to insufficient access control in the Microsoft DWM Core Library of Windows operating systems. It allows an attacker to elevate their privileges,...

PT-2023-1157 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Overlay Filter component, which is caused by insufficient access control. This vulnerability can be exploited ...

CVE-2022-4801 Insufficient Granularity of Access Control in usememos/memos

Insufficient Granularity of Access Control in GitHub repository usememos/memos prior to 0.9.1...

PT-2022-6010 · Microsoft · Windows System Monitor

Name of the Vulnerable Software and Affected Versions: Microsoft Windows System Monitor Sysmon affected versions not specified Description: The issue is related to insufficient access control in the Microsoft Windows Sysmon system service, which can be exploited to elevate privileges...

PT-2022-5858 · Microsoft · Windows Projected File System +1

Name of the Vulnerable Software and Affected Versions: Windows Projected File System affected versions not specified Description: The issue is related to insufficient access control in the Windows Projected File System, which can be exploited to elevate privileges. This allows an attacker to affe...

PT-2022-5859 · Microsoft · Windows Bluetooth Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Bluetooth Driver affected versions not specified Description: The issue is related to insufficient access control in the Windows Bluetooth Driver, which can be exploited to elevate privileges. This allows an attacker to affect the...

PT-2022-5883 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insufficient access control in the Windows Print Spooler, which can be exploited to elevate privileges. This allows an attacker to affect the system. N...

PT-2022-5850 · Microsoft · Windows Graphics +1

Name of the Vulnerable Software and Affected Versions: Windows Graphics Component affected versions not specified Description: The issue is related to insufficient access control in the Windows Graphics Component, which can be exploited to elevate privileges. This can allow an attacker to affect...

PT-2022-5872 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Client Server Run-Time Subsystem CSRSS of Windows operating systems. It allows an attacker to elevate their privileges...

PT-2022-6221 · Avg +3 · Avg Antivirus +3

Name of the Vulnerable Software and Affected Versions: Avast Antivirus affected versions not specified Avira Antivirus affected versions not specified AVG Antivirus affected versions not specified Norton Antivirus affected versions not specified Description: The issue is related to a Privilege...

PT-2022-5762 · Google +1 · Google Chrome +1

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to insufficient access control in Microsoft Edge and Google Chrome browsers. Exploitation of this issue may allow a remote attacker to elevate the...

AMD Link 安全漏洞

AMD Link is a free application from Ultraviolet Semiconductor AMD. It allows you to connect to your gaming PC from your phone, tablet, TV or other PC to play games almost anywhere. AMD Link suffers from a security vulnerability that stems from the fact that its insufficient access control may lea...

PT-2022-5472 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Win32k component of Windows operating systems, which can be exploited to elevate privileges. An elevation-of-privilege vulnerabili...

PT-2022-5515 · Microsoft · Windows System Monitor

Name of the Vulnerable Software and Affected Versions: Microsoft Windows System Monitor Sysmon affected versions not specified Description: The issue is related to insufficient access control in the Microsoft Windows System Monitor Sysmon service, which can allow an attacker to elevate their...

PT-2022-5656 · Microsoft · Windows Win32 Kernel Subsystem +1

Name of the Vulnerable Software and Affected Versions: Windows Win32 Kernel Subsystem affected versions not specified Description: The issue is related to insufficient access control in the Windows Win32 Kernel Subsystem, allowing an attacker to elevate their privileges. This can impact the syste...

PT-2022-5514 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to insufficient access control in Microsoft Exchange Server, allowing an attacker to elevate their privileges. This can affect the system, potentially...

Cisco Identity Services Engine Insufficient Access Control (cisco-sa-ise-access-contol-EeufSUCx)

According to its self-reported version, Cisco Identity Services is affected by an insufficient access control vulnerability. An authenticated, remote attacker can exploit this, by sending a crafted HTTP request, in order to bypass authorization. Please see the included Cisco BIDs and Cisco Securi...

Cisco Identity Services Engine Insufficient Access Control Vulnerability

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to bypass authorization and access system files. This vulnerability is due to improper access control in the web-based management interface of an affected...

Haas Automation Controller 安全漏洞

Haas Automation Controller is an industrial control system from Haas Automation, USA. A security vulnerability exists in Haas Automation Controller version 100.20.000.1110, which stems from insufficient access control. An attacker could use this vulnerability to write macros to registers outside ...

PT-2022-7234 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Ventura 13 Description: The issue is related to insufficient access control in the APFS component of the macOS operating system. Exploitation of this issue may allow an attacker to disclose protected information. An ap...